Can some one help me in building a Splunk search with the below mentioned criteria!.
My application contains some fields and one of the field is "Request Number". I want the search query to fetch the records which have "Request Number" as "0".
I have the source name, Host name etc. I'm getting other results also, But no Requet number as 0. Can someone help me out here.
index=yourindex
| where 'Request Number' = 0
This isn't returning any results.
Index = * | search "Request Number"=0
Please post some test data to test the query if its not sensitive data.